`ws`

Ecosystem:
npm

Package URL:
pkg:npm/ws

Total PRs:
16,028 Dependabot PRs

Latest PR:
about 3 hours ago

Unique Repositories:
5,838 repositories

Unique Repos (30 days):
2,555 repositories

Security Advisories

Denial of Service in ws

GHSA-5v72-xg48-5rpm HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` can crash when a specially crafted `Sec-WebSocket-Extensions` header containing `Object.prototype` property names as exte...

DoS due to excessively large websocket message in ws

GHSA-6663-c963-2gqg CVE-2016-10542 HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition whe...

Remote Memory Disclosure in ws

GHSA-2mhh-w6q8-5hxw CVE-2016-10518 LOW published over 6 years ago • updated 3 months ago

Versions of `ws` prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow ...

ws affected by a DoS when handling a request with many HTTP headers

GHSA-3h5v-q93c-6h6q CVE-2024-37890 HIGH published about 1 year ago • updated about 1 month ago

### Impact A request with a number of headers exceeding the[`server.maxHeadersCount`][] threshold could be used to crash a ws server. ### Proof o...

ReDoS in Sec-Websocket-Protocol header

GHSA-6fc8-4gx4-v693 CVE-2021-32640 MODERATE published over 4 years ago • updated about 1 month ago

### Impact A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. ### Proof of conc...

Recent PRs

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simply-colorful #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/obsidian_vibrant #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/nordic #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/perso #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/mammoth #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dekurai #33

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simplicity #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dark-graphite #25

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/faded #22

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/abyssal #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/githubdhc #30

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/arcane #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/jotter #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/neon-synthwave #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/yue #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/purple-aurora #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/duality #16

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/willemstad #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/publisher #16

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/minimal-edge #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/poimandres #24

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oliviers-theme #25

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/enhanced-file-explorer-tree #15

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/material-gruvbox #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/deeper-work #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/planetary #12

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/lemons-theme #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/royal-velvet #35

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/obsidian-nord #23

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/w95 #32

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/origami #24

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/fastppuccin #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/ayu-light-mirage #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/fusion #32

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/typewriter #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dark-castle #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/blackbird #30

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/lorens #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/virgo #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/cardstock #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/notation #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/pisum #30

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/mono-black-monochrome-charcoal #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dracula-plus #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/sad-machine-druid #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oldsidian-purple #32

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/reverie #32

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/allium #34

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/vanilla-amoled-color #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/material-ocean #24

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

Package Details

Name:	`ws`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/ws`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 3

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js

Repository:	https://github.com/websockets/ws
Homepage:	https://github.com/websockets/ws
Latest Release:	`8.18.2` 4 months ago
Dependent Repos:	900,116
Dependent Packages:	19,475
Downloads:	440,496,315
Ranking:	Top 0.0376% by dependent repos Top 0.0016% by downloads Top 0.0056% by dependent pkgs

PR Status

Open 7,947 (49.6%)

Merged 780 (4.9%)

Closed 5,085 (31.7%)

PR Types

Removal 6 (0.0%)

Minor 1,540 (9.6%)

Major 289 (1.8%)

Patch 11,957 (74.6%)